Senior Threat Hunter: OT/ICS & Detection Lead

ST ENGINEERING INFO-SECURITY PTE. LTD.; Singapore; On-site; SGD 120,000 - 190,000; Full time

Job summary

ST Engineering Info-Security Pte. Ltd. is seeking a hands-on security leader to drive proactive threat hunting for enterprise, OT, and critical infrastructure customers.

You will own the technical hunt lifecycle from threat intelligence through hypotheses, telemetry readiness, investigative queries, evidence validation, and detection improvements. This is a hands-on leadership role requiring collaboration with SOC, DFIR, and detection engineering teams.

Qualifications

• Cybersecurity seniority with hands-on threat hunting and DFIR ownership.
• At least 7 years in cybersecurity, with 5+ years in OT/ICS security.
• Experience delivering customer-facing technical security services.

Responsibilities

• Lead threat intelligence, hunt planning, and methodology aligned to customer contexts, assets, and threat exposure.
• Coordinate telemetry readiness and log sources across Windows/Linux, OT devices, HMIs, and networks; ensure data quality.
• Lead complex IOC-, TTP-, and behavior-driven hunts with SIEM correlation and investigation pivots.
• Review findings, escalate, and hand over to DFIR with clear timelines and evidence.
• Mentor hunters and coordinate with SOC, detection engineering, and platform teams for enablement.

Skills

Threat hunting

OT/ICS cybersecurity

Threat intelligence

MITRE ATT&CK

SIEM analysis

EDR/XDR/SOAR

Team leadership

TA/TACTICS mapping

Tools

Splunk SPL

Elastic KQL/EQL

Microsoft Defender for Endpoint

SIEM/UEBA

Job description

ST Engineering Info-Security Pte. Ltd. is seeking a hands-on security leader to drive proactive threat hunting for enterprise, OT, and critical infrastructure customers.

You will own the technical hunt lifecycle from threat intelligence through hypotheses, telemetry readiness, investigative queries, evidence validation, and detection improvements. This is a hands-on leadership role requiring collaboration with SOC, DFIR, and detection engineering teams.